Forum Breach: Ice Cream Forum Leaked 424 Passwords and Emails

HEROIC analysts occured upon a database listing in May 2021 tied to the Ice Cream Forum, an Iceland-based online community for ice cream enthusiasts. The breach exposed 424 user records containing email addresses, usernames, password hashes, IP addresses, birthdays, and password salts. Despite its small size, the dataset includes sensitive authentication data that poses ongoing risk to affected users.

Why Password Hashes and Salts Together Are Especially Dangerous

When attackers obtain both password hashes and their corresponding salts, they can launch highly targeted cracking attempts using GPU-powered tools. Ice Cream Forum stored passwords using vBulletin hashing, which is partcularly susceptible to offline cracking. Once cracked, these credentials can be tested across email providers, banking sites, and other platforms through credential stuffing attacks.

What Was Exposed in the Ice Cream Forum Breach

• Email Address
• Password Hash
• Username
• IP Address
• Birthday
• Salt

Why This Breach Puts Users at Risk Beyond the Forum

The combination of email addresses, crackable password hashes, IP addresses, and birthdays makes this a rich dataset for identity theft and account takeover. Attackers can use birthdates to bypass security questions, while IP addresses help correlate users across platforms. Credential stuffing using recieved forum credentials against financial and retail accounts is a well-documented follow-on attack.

How Database Breaches Work

A database breach occurs when attackers exploit vulnerabilities in web applications or server configurations to gain direct access to a site's backend database. Forum platforms like vBulletin have historically been targeted due to known vulnerabilities in older versions. Once inside, attackers export the entire user table and distribute it through underground markets or dark web forums.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email against 400 billion leaked records, including the Ice Cream Forum breach. Find out in seconds whether your credentials are circulating in the wild and take action before attackers do.